4d947f560bbcf9563dddaa2059654fc1_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

4d947f560bbcf9563dddaa2059654fc1_JaffaCakes118
Size

324KB
MD5

4d947f560bbcf9563dddaa2059654fc1
SHA1

bc4771466cee82e8b851f9c15786f2522a8dd2f0
SHA256

3fbb01b1da9a577ddffae39b21be54603e4e18eda203edf0e7f876a4752dc7aa
SHA512

3a93573e6fc03e918440a141e48f171b68efd8d8f46c1ecfb6ba57479db8a1877f520f411d95a36037f48ff47fb9fe6c089392ffdcfd6d6e219ba14d7fdee242
SSDEEP

6144:FxzEWbuCNYyssyrUX8pYF3I0pOhXrP0NNpAtW5PaH6PwXW7OavpN2kguH:FN/a+reYlPkXjSmW5PaqwGHJgu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4d947f560bbcf9563dddaa2059654fc1_JaffaCakes118

Files

4d947f560bbcf9563dddaa2059654fc1_JaffaCakes118
.exe windows:5 windows x86 arch:x86

10144eb9de2e16b61adb9e935ca72c4d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

VariantClear

msvcrt

_adjust_fdiv
wcscpy
_purecall
_initterm
wcsncpy
malloc
wcsncat
free
wcslen
__CxxFrameHandler
realloc
_except_handler3

advapi32

RegCloseKey
RegEnumKeyExW
RegQueryValueExW
RegOpenKeyExW
RegQueryInfoKeyW
RegDeleteKeyW
RegCreateKeyExW
RegDeleteValueW
RegSetValueExW

ole32

CoTaskMemRealloc
CoTaskMemFree
CoTaskMemAlloc

user32

CharNextW

kernel32

MultiByteToWideChar
InitializeCriticalSection
LoadResource
DeleteCriticalSection
lstrlenW
FindResourceW
EnterCriticalSection
lstrcmpiW
FreeLibrary
HeapDestroy
lstrlenA
GetModuleFileNameW
GetLastError
GetACP
lstrcpyW
LoadLibraryExW
DisableThreadLibraryCalls
GetStartupInfoA
SizeofResource
LeaveCriticalSection
lstrcatW
InterlockedDecrement

ntdll

RtlAddAccessAllowedAceEx
NtAllocateVirtualMemory
RtlAdjustPrivilege

rpcrt4

RpcStringFreeW

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 298KB - Virtual size: 298KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

10144eb9de2e16b61adb9e935ca72c4d

Headers

DLL Characteristics

File Characteristics

Imports

oleaut32

msvcrt

advapi32

ole32

user32

kernel32

ntdll

rpcrt4

Sections

.text Size: 9KB - Virtual size: 8KB

.rsrc Size: 12KB - Virtual size: 11KB

.data Size: 3KB - Virtual size: 1.4MB

.rdata Size: 298KB - Virtual size: 298KB

.tls Size: 512B - Virtual size: 4KB

.text
Size: 9KB - Virtual size: 8KB

.rsrc
Size: 12KB - Virtual size: 11KB

.data
Size: 3KB - Virtual size: 1.4MB

.rdata
Size: 298KB - Virtual size: 298KB

.tls
Size: 512B - Virtual size: 4KB